GDPR Notice
Last updated: May 2025
1. Data Controller
PM Alliance Ltd acts as the data controller for all personal data processed through this platform. For data-related enquiries, contact us at info@pmallianceltd.co.uk.
2. Legal Basis for Processing
We process personal data under the following lawful bases:
- Contractual necessity (employment and payroll)
- Legal obligation (tax and compliance requirements)
- Legitimate interest (business operations and workforce management)
- Consent (where required)
3. Data Protection Principles
PM Alliance Ltd adheres to GDPR principles:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
4. Data Subject Rights
Users may request:
- Access to data
- Correction
- Erasure
- Restriction of processing
- Objection to processing
- Data portability
Requests can be made via info@pmallianceltd.co.uk.
5. Data Transfers
We ensure any third-party processors comply with GDPR standards and provide adequate data protection.
6. Security Measures
We implement:
- Encryption at rest and in transit
- Role-based access control
- Audit logging
- Secure authentication systems
- Regular security reviews